Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File:                     Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier:          hdKEDeORFDaBsDOnhB8UAL4om6C7ZNyx0qoLcHGvhPQ=
Subject key identifier:   4A:0C:98:59:D9:34:94:80:15:42:9B:B9:37:D0:B1:40:9A:0D:88:2F
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer:       /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial:       019F189EF7952725DB00F25B5BBD5DBBB59C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number:          1676
Signing time:             Tue 30 Jun 2026 13:01:38 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:38 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:38 +0000
Files and hashes:         1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: 45N5AamNdfiKFAPCxN9kV7RfRR2TpbSBCUsCeKlDmGk=)
                          2: ZJDmPvzDE__eYUkVLrAmHcTbK2E.roa (hash: mZslKl2yoouF0x/HaqlGPF55VMLSQDizBAGrzjr6tuY=)
                          3: bipK7OOAYGpHrw7S5fmJoRnxSxQ.roa (hash: rrZJyfnTOVyxttfXNIKKI76uVK5IaaBMN4ZDEVeQY94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:f7:95:27:25:db:00:f2:5b:5b:bd:5d:bb:b5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
        Validity
            Not Before: Jun 30 13:01:38 2026 GMT
            Not After : Jul  1 13:01:38 2026 GMT
        Subject: CN=4a0c9859d934948015429bb937d0b1409a0d882f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cf:c0:ce:21:80:6a:47:95:53:54:40:db:0d:
                    fe:9c:0c:4a:49:35:b0:2e:d8:21:5f:fe:9c:34:fa:
                    30:77:b5:aa:4e:6d:5f:39:0c:00:b1:5a:8e:4b:0e:
                    5c:6e:71:d3:aa:e9:88:f3:a8:f6:d3:b0:2b:73:1d:
                    76:92:9a:10:d3:25:28:47:54:01:e7:2a:fb:ec:47:
                    a1:09:6d:a5:d6:60:52:1c:b7:82:60:f1:c5:06:1e:
                    20:02:58:d7:e3:e6:b9:34:90:37:fc:e7:2b:5c:e8:
                    b9:58:38:c5:6c:63:78:34:b7:80:ca:47:df:4c:4d:
                    73:0d:70:83:61:4c:a6:ce:b5:88:f9:30:8e:b9:8c:
                    45:d3:d9:56:f2:cc:50:e0:a4:f2:2a:79:e6:e9:f9:
                    7a:f8:57:85:c0:b3:5a:ef:0a:b0:c5:7c:21:46:da:
                    ea:11:be:0b:bb:cd:df:c7:3d:4a:36:c3:7f:9f:0e:
                    f8:68:d7:41:86:50:e4:4d:11:63:6c:58:9d:e3:06:
                    9d:2f:18:2d:8e:4c:53:4e:dc:10:85:ed:84:2b:f6:
                    f2:0f:ff:03:43:b8:1e:ce:5d:17:a6:13:a6:45:89:
                    c7:de:5b:b3:ca:93:34:30:dd:3c:7a:98:13:f8:fa:
                    83:7a:d7:86:1e:c0:01:a3:b9:17:7a:5a:46:14:72:
                    a9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0C:98:59:D9:34:94:80:15:42:9B:B9:37:D0:B1:40:9A:0D:88:2F
            X509v3 Authority Key Identifier:
                keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:aa:2c:77:3c:3c:ab:8c:82:c3:51:05:b5:09:7f:8b:7f:da:
         55:7d:e1:b8:e2:ef:d6:b9:64:74:e4:ab:07:0c:f7:54:18:08:
         bb:1a:6a:be:c4:ce:50:6d:d3:d3:36:64:39:de:1b:f9:d3:81:
         f6:22:2f:96:92:35:6d:ad:cd:90:dc:e5:1b:5b:a9:6c:8d:9a:
         22:39:3b:c2:b2:55:f6:22:af:de:2a:5a:9e:98:d7:6d:05:d9:
         ba:dd:51:06:f3:b3:24:32:ee:6c:da:0a:63:84:e6:83:24:c1:
         0a:8d:e1:33:49:48:d3:e4:ed:65:f1:cb:1a:d6:c8:b5:c0:65:
         df:55:6d:25:6b:94:2c:4c:de:26:c8:c1:d5:7c:7f:50:c6:3e:
         e1:24:97:32:42:f5:bb:5b:c9:9e:6f:8e:ae:aa:6f:da:b0:4b:
         4b:2c:4c:2b:ec:84:81:85:29:1f:14:b3:1d:ac:ec:a5:da:1e:
         74:c0:bd:71:59:4d:d1:57:6b:7d:ad:f9:6f:2f:d0:ac:92:b0:
         73:55:95:de:5c:87:5f:52:4e:ce:da:17:75:23:c1:80:5f:cd:
         46:26:41:1b:7b:1e:7d:fe:ff:f3:09:ab:55:d1:7a:44:39:fe:
         bd:65:d7:48:da:49:cb:98:b7:c4:c2:2b:88:16:3f:00:bb:7c:
         01:5f:c1:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnveVJyXbAPJbW71du7WcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZGNmNjJjNmI1NDExMTM5YTVkMTMwOWRkOWVkOTI2ZjQz
MTQzMjAwHhcNMjYwNjMwMTMwMTM4WhcNMjYwNzAxMTMwMTM4WjAzMTEwLwYDVQQD
Eyg0YTBjOTg1OWQ5MzQ5NDgwMTU0MjliYjkzN2QwYjE0MDlhMGQ4ODJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6s/AziGAakeVU1RA2w3+nAxKSTWw
LtghX/6cNPowd7WqTm1fOQwAsVqOSw5cbnHTqumI86j207Arcx12kpoQ0yUoR1QB
5yr77EehCW2l1mBSHLeCYPHFBh4gAljX4+a5NJA3/OcrXOi5WDjFbGN4NLeAykff
TE1zDXCDYUymzrWI+TCOuYxF09lW8sxQ4KTyKnnm6fl6+FeFwLNa7wqwxXwhRtrq
Eb4Lu83fxz1KNsN/nw74aNdBhlDkTRFjbFid4wadLxgtjkxTTtwQhe2EK/byD/8D
Q7gezl0XphOmRYnH3luzypM0MN08epgT+PqDeteGHsABo7kXelpGFHKpUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoMmFnZNJSAFUKbuTfQsUCaDYgvMB8GA1UdIwQY
MBaAFArc9ixrVBETml0TCd2e2Sb0MUMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3R6MkxHdFVFUk9hWFJNSjNaN1pKdlF4UXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYzg0M2UtNjBjNy00N2FjLTgyM2It
ZjhkNmJkMzBjYzE5LzEvQ3R6MkxHdFVFUk9hWFJNSjNaN1pKdlF4UXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYzg0M2UtNjBjNy00N2FjLTgyM2ItZjhkNmJkMzBjYzE5
LzEvQ3R6MkxHdFVFUk9hWFJNSjNaN1pKdlF4UXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqosdzw8
q4yCw1EFtQl/i3/aVX3huOLv1rlkdOSrBwz3VBgIuxpqvsTOUG3T0zZkOd4b+dOB
9iIvlpI1ba3NkNzlG1upbI2aIjk7wrJV9iKv3ipanpjXbQXZut1RBvOzJDLubNoK
Y4TmgyTBCo3hM0lI0+TtZfHLGtbItcBl31VtJWuULEzeJsjB1Xx/UMY+4SSXMkL1
u1vJnm+Orqpv2rBLSyxMK+yEgYUpHxSzHazspdoedMC9cVlN0Vdrfa35by/QrJKw
c1WV3lyHX1JOztoXdSPBgF/NRiZBG3seff7/8wmrVdF6RDn+vWXXSNpJy5i3xMIr
iBY/ALt8AV/BGA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:23:48 2026 by rpki-client